I think it might be helpful to understand the flow from a high level to help you further. Because right now I’m bit confused on the ordering / actors involved and what the difference between what is supposed to happen and what is happening.
Doesn’t have to be a great diagram. Something shitty like this diagram below.
I don’t have experience with web sockets in godot but I do have experience in web development
I assume it’s because you are hosting the game from somewhere other than where you are trying to connect.
A look at this article should help. https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/CORS#examples_of_access_control_scenarios
You’ll need to send some extra headers that will allow the browser to connect to it.
I think this one? https://developer.mozilla.org/en-US/docs/Web/HTTP/Guides/CORS#access-control-allow-origin
I only ever set it to * and forgot about it when I have done API development.
I hope this is helpful!
Let’s not forget all the new cookie banners everyone deals with now.